Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-10048

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker can execute arbitrary shell commands with root privileges, allowing full takeover of the device. This includes launching services such as Telnet, exfiltrating credentials, modifying system configuration, and disrupting availability. The flaw stems from the lack of authentication and inadequate sanitation of the cmd parameter.

Published

2025-08-01T21:15:26.567

Last Modified

2025-09-23T17:41:57.273

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Secondary
CWE-78

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	dlink	dir-300_firmware	≤ 2.13	Yes
Hardware	dlink	dir-300	-	No
Operating System	dlink	dir-600_firmware	≤ 2.14b01	Yes
Hardware	dlink	dir-600	-	No

References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb Exploit ([email protected])
https://web.archive.org/web/20131022221648/http://www.s3cur1ty.de/m1adv2013-003 Exploit, Third Party Advisory ([email protected])
https://www.exploit-db.com/exploits/24453 Exploit ([email protected])
https://www.exploit-db.com/exploits/27528 Exploit ([email protected])
https://www.vulncheck.com/advisories/d-link-legacy-unauth-rce Third Party Advisory ([email protected])
https://www.exploit-db.com/exploits/27528 Exploit (134c704f-9b21-4f2e-91b3-4a467353bcc0)